Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: XxYSaIWWBVdxNGQ9ov8pf5azS/8gIcl9OPDj/Ow39ag=
Subject key identifier: 94:9F:14:2D:A7:E8:73:1A:78:1F:2F:10:05:DB:23:09:3F:4F:10:33
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 0197301687636523000BFCB999B7B4B1F77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1577
Signing time: Mon 02 Jun 2025 10:01:12 +0000
Manifest this update: Mon 02 Jun 2025 10:01:12 +0000
Manifest next update: Tue 03 Jun 2025 10:01:12 +0000
Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: lx2DyCLibORJoc9/FoHhZIjgbOzYGy0gwFI8T86AXgA=)
4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:16:87:63:65:23:00:0b:fc:b9:99:b7:b4:b1:f7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jun 2 10:01:12 2025 GMT
Not After : Jun 3 10:01:12 2025 GMT
Subject: CN=949f142da7e8731a781f2f1005db23093f4f1033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:08:63:75:1c:0d:02:c2:4f:3e:d9:9c:03:
cb:5e:99:74:1e:f9:47:2e:43:ec:b1:a7:24:51:06:
0b:06:fd:a0:30:a9:a4:87:eb:b2:8f:75:60:6c:95:
7f:d6:c1:e5:9b:78:9a:af:fe:44:db:a0:1b:94:23:
ab:52:f0:62:45:31:50:85:dc:1e:0b:0a:39:de:82:
a1:f6:cf:c5:ac:a9:c9:bd:fe:3a:f3:64:56:a9:77:
28:ba:3f:d0:a1:15:dc:e9:86:77:57:95:84:ec:bf:
84:59:59:c9:de:df:93:92:f7:0b:20:e6:3b:1d:59:
79:42:10:d8:dd:2e:2c:59:db:76:4f:67:7e:8a:d2:
0f:af:70:75:e0:4f:ad:06:0b:b1:c8:01:ff:32:62:
ab:3b:a7:c4:5a:ff:dd:79:b5:40:5d:09:14:39:e7:
18:36:0e:40:5d:49:63:24:95:c9:f9:f1:5c:4a:1d:
fc:90:8d:ea:c1:e8:5b:f4:ab:3a:c0:e8:8d:25:5f:
0e:ce:f1:37:ed:f7:46:8e:7e:f8:cd:c7:c1:1a:29:
be:b3:dc:89:c1:5c:03:89:c7:ab:93:6f:27:1d:8a:
74:83:3c:cc:89:7f:f6:fc:89:bf:89:85:1b:bc:4f:
70:69:a6:1f:fe:3d:ad:68:21:c0:4d:2e:98:2a:50:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:14:2D:A7:E8:73:1A:78:1F:2F:10:05:DB:23:09:3F:4F:10:33
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a6:a6:91:c5:47:90:a2:9b:cf:6d:6e:cf:e6:5f:d6:18:ba:
47:12:42:20:30:df:a6:3f:cc:89:2f:1f:6d:0a:3e:7c:9c:c0:
44:5f:40:2b:6b:e7:55:bd:02:88:cf:26:54:a4:ff:e2:0e:16:
80:db:6f:2b:54:f4:79:1d:db:2d:76:a9:cd:96:10:49:6e:5c:
3d:9f:0a:df:ad:98:24:55:80:b9:54:63:7b:1b:ae:6b:6f:2f:
3b:c2:f3:ab:31:39:25:d2:4e:46:2b:be:72:dc:58:c3:a4:a1:
6d:c0:ca:c2:5a:d3:2c:51:0d:6e:e3:b6:17:f7:05:5c:e2:15:
06:83:c3:63:ca:50:cb:e5:f8:ac:7c:16:a6:e6:ed:21:ff:31:
33:5e:17:5f:1b:f6:a4:d6:d2:7f:b8:f1:74:98:04:2f:79:d5:
44:af:ec:bf:cf:6e:ad:fd:1e:93:e4:2f:16:be:44:b1:51:71:
d1:64:58:e3:8d:fd:d1:5b:e6:e4:f0:b8:53:ed:c3:74:4b:2e:
2a:96:fa:47:1e:a3:ed:ea:00:cf:ee:b0:2c:ba:c7:0e:a6:8b:
03:da:e6:d5:b3:d4:c2:d8:a4:8f:be:1b:60:58:67:66:7b:b0:
2c:e3:05:ae:9a:44:83:5d:d8:28:a4:14:b4:ef:4c:93:77:0e:
b7:a5:f3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:49:10 2025 by rpki-client